API Keys#

Create, list, and revoke API keys programmatically. Keys are prefixed with hmt_ and scoped to your account.

POST /api/v1/keys#

Create a new API key.

bash

curl -X POST https://humuter.com/api/v1/keys \
  -H "Authorization: Bearer hmt_your_key" \
  -H "Content-Type: application/json" \
  -d '{"name": "Production Key"}'

Response#

json

{
  "id": "key_abc123",
  "name": "Production Key",
  "key": "hmt_live_abc123def456",
  "created_at": "2026-03-04T12:00:00Z"
}

The full key is only returned once at creation time. Store it securely — you won't be able to see it again.

GET /api/v1/keys#

List all API keys for your account.

bash

curl https://humuter.com/api/v1/keys \
  -H "Authorization: Bearer hmt_your_key"

Response#

json

{
  "keys": [
    {
      "id": "key_abc123",
      "name": "Production Key",
      "prefix": "hmt_live_abc...",
      "created_at": "2026-03-04T12:00:00Z",
      "last_used_at": "2026-03-04T14:30:00Z"
    }
  ]
}

DELETE /api/v1/keys/:id#

Revoke an API key. This action is immediate and irreversible.

bash

curl -X DELETE https://humuter.com/api/v1/keys/key_abc123 \
  -H "Authorization: Bearer hmt_your_key"

Response#

json

{
  "success": true,
  "message": "Key revoked successfully"
}